Free Practice Fortinet NSE4_FGT_AD-7.6 Exam Questions 2026

Stay ahead with 100% Free Fortinet NSE 4 - FortiOS 7.6 Administrator NSE4_FGT_AD-7.6 Dumps Practice Questions

Page: 1 / 19

Total 94 Questions | Updated On: May 23, 2026

Add To Cart

Question 1

What are two characteristics of HA cluster heartbeat IP addresses in a FortiGate device? (Choose two.)

A : Heartbeat IP addresses are used to distinguish between cluster members.

B : The heartbeat interface of the primary device in the cluster is always assigned IP address 169.254.0.1.

C : A change in the heartbeat IP address happens when a FortiGate device joins or leaves the cluster.

D : Heartbeat interfaces have virtual IP addresses that are manually assigned.

Answer: A,C

Question 2

What are two characteristics of HA cluster heartbeat IP addresses in a FortiGate device? (Choose two.)

A : Heartbeat IP addresses are used to distinguish between cluster members.

B : The heartbeat interface of the primary device in the cluster is always assigned IP address 169.254.0.1.

C : A change in the heartbeat IP address happens when a FortiGate device joins or leaves the cluster.

D : Heartbeat interfaces have virtual IP addresses that are manually assigned.

Answer: A,C

Question 3

Which three statements explain a flow-based antivirus profile? (Choose three answers)

A : FortiGate buffers the whole file but transmits to the client at the same time.

B : Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection.

C : If a virus is detected, the last packet is delivered to the client.

D : Flow-based inspection optimizes performance compared to proxy-based inspection.

E : The IPS engine handles the process as a standalone.

Answer: A,B,D

Question 4

You have configured an application control profile, set peer-to-peer traffic to Block under the Categories tab. and applied it to the firewall policy. However, your peer-to-peer traffic on known ports is passing through the FortiGate without being blocked. What FortiGate settings should you check to resolve this issue?

A : FortiGuard category ratings

B : Network Protocol Enforcement

C : Replacement Messages for UDP-based Applications

D : Application and Filter Overrides

Answer: B

Question 5

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors. What is the reason for the certificate warning errors?

A : The option invalid SSL certificates is set to allow on the SSL/SSH inspection profile.

B : The matching firewall policy is set to proxy inspection mode.

C : The browser does not trust the certificate used by FortiGate for SSL inspection.

D : The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.

Answer: C

Page: 1 / 19

Total 94 Questions | Updated On: May 23, 2026

Add To Cart